github.com/argoproj/argo-cd vulnerabilities (Go)
52 vulnerabilities.
-
github.com/argoproj/argo-cdGo Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks 9.9 Critical -
github.com/argoproj/argo-cdGo Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL 8.8 High -
github.com/argoproj/argo-cdGo Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation 7.3 High -
github.com/argoproj/argo-cdGo Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations 6.3 Medium -
github.com/argoproj/argo-cdGo ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction 9.6 Critical -
github.com/argoproj/argo-cdGo In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext... 7.7 High -
github.com/argoproj/argo-cdGo Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook 7.5 High -
github.com/argoproj/argo-cdGo argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload 7.5 High -
github.com/argoproj/argo-cdGo Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload 7.5 High -
github.com/argoproj/argo-cdGo Repository Credentials Race Condition Crashes Argo CD Server 6.5 Medium -
github.com/argoproj/argo-cdGo Argo CD: Project API Token Exposes Repository Credentials 10.0 Critical -
github.com/argoproj/argo-cdGo Argo CD allows cross-site scripting on repositories page 9.1 Critical -
github.com/argoproj/argo-cdGo Argo CD does not scrub secret values from patch errors 6.8 Medium -
github.com/argoproj/argo-cdGo The Argo CD web terminal session does not handle the revocation of user permissions properly. 4.7 Medium -
github.com/argoproj/argo-cdGo Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint 7.5 High -
github.com/argoproj/argo-cdGo Unauthenticated Access to sensitive settings in Argo CD 5.3 Medium -
github.com/argoproj/argo-cdGo Argo CD allows authenticated users to enumerate clusters by name 4.3 Medium -
github.com/argoproj/argo-cdGo ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache 9.1 Critical -
github.com/argoproj/argo-cdGo Denial of Service via malicious jqPathExpressions in ignoreDifferences 6.5 Medium -
github.com/argoproj/argo-cdGo Argo CD' API server does not enforce project sourceNamespaces 4.8 Medium -
github.com/argoproj/argo-cdGo Argo CD Denial of Service (DoS) Vulnerability Due to Unsafe Array Modification in Multi-threaded Environment 7.5 High -
github.com/argoproj/argo-cdGo Users with `create` but not `override` privileges can perform local sync in argo-cd 6.4 Medium -
github.com/argoproj/argo-cdGo Cross-site scripting on application summary component in argo-cd 9.1 Critical -
github.com/argoproj/argo-cdGo Cross-Site Request Forgery (CSRF) in github.com/argoproj/argo-cd 8.4 High -
github.com/argoproj/argo-cdGo Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server 5.0 Medium -
github.com/argoproj/argo-cdGo Denial of Service to Argo CD repo-server 6.5 Medium -
github.com/argoproj/argo-cdGo Cluster secret might leak in cluster details page in Argo CD 9.9 Critical -
github.com/argoproj/argo-cdGo Argo CD web terminal session doesn't expire 4.7 Medium -
github.com/argoproj/argo-cdGo Argo CD authenticated but unauthorized users may enumerate Application names via the API 4.3 Medium -
github.com/argoproj/argo-cdGo Argo CD users with any cluster secret update access may update out-of-bounds cluster secrets 9.1 Critical -
github.com/argoproj/argo-cdGo argo-cd Controller reconciles apps outside configured namespaces when sharding is enabled 8.6 High -
github.com/argoproj/argo-cdGo JWT audience claim is not verified 9.1 Critical -
github.com/argoproj/argo-cdGo Cross-site Scripting for Argo CD single sign on users 2.6 Low -
github.com/argoproj/argo-cdGo Argo CD's certificate verification is skipped for connections to OIDC providers 8.3 High -
github.com/argoproj/argo-cdGo Argo CD vulnerable to Uncontrolled Memory Consumption 6.5 Medium -
github.com/argoproj/argo-cdGo Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server 4.3 Medium -
github.com/argoproj/argo-cdGo External URLs for Deployments can include javascript in argo-cd 9.0 Critical -
github.com/argoproj/argo-cdGo Insecure entropy in argo-cd 8.3 High -
github.com/argoproj/argo-cdGo Argo CD will blindly trust JWT claims if anonymous access is enabled 10.0 Critical -
github.com/argoproj/argo-cdGo Argo CD login screen allows message spoofing if SSO is enabled 4.3 Medium -
github.com/argoproj/argo-cdGo Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server 4.3 Medium -
github.com/argoproj/argo-cdGo Improper access control allows admin privilege escalation in Argo CD 9.9 Critical -
github.com/argoproj/argo-cdGo Argo CD improper access control bug can allow malicious user to escalate privileges to admin level 8.8 High -
github.com/argoproj/argo-cdGo Path traversal allows leaking out-of-bound files from Argo CD repo-server 6.8 Medium -
github.com/argoproj/argo-cdGo Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server 7.7 High -
github.com/argoproj/argo-cdGo Path traversal and dereference of symlinks in Argo CD 7.7 High -
github.com/argoproj/argo-cdGo Helm OCI credentials leaked into Argo CD logs 6.6 Medium -
github.com/argoproj/argo-cdGo Cross-site Scripting (XSS) 4.7 Medium -
github.com/argoproj/argo-cdGo Argo Exposure of Sensitive Information 6.5 Medium -
github.com/argoproj/argo-cdGo Argo CD Insecure default administrative password 8.8 High - Show olderLoading…